Sh1n0g1 / z9
PowerShell Script Analyzer
☆68Updated last year
Alternatives and similar repositories for z9:
Users that are interested in z9 are comparing it to the libraries listed below
- yara detection rules for hunting with the threathunting-keywords project☆116Updated 2 months ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated last year
- information about ransomware groups (Ransomware Analysis Notes)☆37Updated last year
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- ShellSweeping the evil.☆167Updated 5 months ago
- ☆32Updated last year
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆51Updated last year
- Contains compiled binaries of Volatility☆33Updated 3 months ago
- ☆80Updated 5 months ago
- ☆37Updated last year
- MS Graph Commands and Tools for Blue Teamers☆49Updated last year
- C2 Active Scanner☆59Updated 10 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆123Updated last year
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆149Updated 7 months ago
- APT hub, It help's research to collect information and data on the latest APT activities. It collects data on APT profiles, IOCs(1 yr), a…☆51Updated last month
- CarbonBlack EDR detection rules and response actions☆71Updated 8 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 5 months ago
- Some of my rough notes for Docker threat detection☆47Updated last year
- Configuration Extractors for Malware☆104Updated 2 weeks ago
- Active C&C Detector☆154Updated last year
- Rules Shared by the Community from 100 Days of YARA 2023☆76Updated 2 years ago
- https://lolad-project.github.io/☆75Updated 4 months ago
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆73Updated 2 weeks ago
- Yara Rules for Modern Malware☆77Updated last year
- A simple tool designed to create Atomic Red Team tests with ease.☆40Updated last month
- Detection rule validation☆41Updated last year
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆123Updated 3 months ago
- Lazarus analysis tools and research report☆56Updated last year
- create a "simulated internet" cyber range environment☆16Updated last week
- ☆66Updated 2 years ago